Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/2B7210D251F211EEA079D567C4F9AE02.roa
File:                     2B7210D251F211EEA079D567C4F9AE02.roa (raw, json)
Hash identifier:          KvEdnnq3HFq4vunynQUD7wXkZ/MimIokMs/RDCsHEcc=
Subject key identifier:   C1:17:08:C7:C0:BA:F8:52:20:E3:E6:72:D6:03:FE:93:BD:AC:9B:71
Certificate issuer:       /CN=A91B7B32/serialNumber=DEF09AB7E6AD4800D067D702ABF3022629DC56E0
Certificate serial:       02
Authority key identifier: DE:F0:9A:B7:E6:AD:48:00:D0:67:D7:02:AB:F3:02:26:29:DC:56:E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vCat-atSADQZ9cCq_MCJincVuA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/2B7210D251F211EEA079D567C4F9AE02.roa
Signing time:             Wed 13 Sep 2023 04:58:25 +0000
ROA not before:           Wed 13 Sep 2023 04:58:25 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     151807
IP address blocks:        103.131.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.crl
                          rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vCat-atSADQZ9cCq_MCJincVuA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 14 Jun 2024 07:17:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7B32/serialNumber=DEF09AB7E6AD4800D067D702ABF3022629DC56E0
        Validity
            Not Before: Sep 13 04:58:25 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=65014171-9663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:68:d3:28:54:c3:13:ec:cd:fa:0f:cc:92:e9:
                    8b:99:f6:0a:8c:5c:fd:4e:79:8c:bc:af:8b:99:bf:
                    fd:72:0e:c4:a6:dc:b2:2c:30:3f:2b:94:2f:d7:42:
                    3a:b6:77:bf:a2:1a:f6:e0:1e:85:3a:ad:48:54:df:
                    ca:46:52:37:a8:71:9d:fa:a8:17:3d:26:91:71:ab:
                    f4:56:af:96:32:ac:fe:3a:79:98:67:b8:2c:83:9a:
                    1c:4d:b7:3b:5f:e2:ac:ce:ce:97:46:ad:50:62:81:
                    7d:ae:12:60:a4:f1:5e:10:56:0b:48:bd:cb:08:46:
                    6c:d5:a9:38:47:79:86:f7:58:db:ef:c0:06:18:fa:
                    8e:86:d2:3b:46:74:41:e9:cf:b7:04:43:1d:2b:a6:
                    3c:89:c0:1b:95:32:44:50:a9:d2:05:74:09:c0:01:
                    72:c6:f4:53:ed:6b:f5:d7:c0:e9:d3:40:34:94:57:
                    04:60:3a:c5:86:e6:e3:6c:40:17:d3:66:02:5d:ba:
                    b2:94:2e:71:5c:56:ae:31:c7:01:ef:49:0c:38:b0:
                    ae:ea:4f:78:fd:e3:27:ac:09:1f:67:86:5c:0c:52:
                    22:9c:8c:26:14:12:14:23:b8:23:cd:7d:1e:06:43:
                    77:f9:fd:dd:5c:f8:e5:c5:5e:1f:f9:eb:2e:8c:16:
                    b6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:17:08:C7:C0:BA:F8:52:20:E3:E6:72:D6:03:FE:93:BD:AC:9B:71
            X509v3 Authority Key Identifier:
                keyid:DE:F0:9A:B7:E6:AD:48:00:D0:67:D7:02:AB:F3:02:26:29:DC:56:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vCat-atSADQZ9cCq_MCJincVuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/2B7210D251F211EEA079D567C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:59:bf:38:c4:eb:2d:68:58:30:9a:13:2b:48:76:56:cc:1e:
         01:b4:68:ec:97:08:7d:ce:88:d2:ba:c6:c5:df:83:b3:cc:c4:
         4f:5d:29:e1:b9:ca:d2:4e:4f:e3:58:79:bd:b6:67:f5:f8:7d:
         ec:90:a5:c8:d6:da:8a:a0:7c:25:2e:67:ba:9c:82:d2:4e:3e:
         5a:e5:14:7c:e4:2a:11:51:ab:e5:47:12:8d:06:c5:78:29:5a:
         a0:66:fd:dd:2f:74:4b:e0:b9:cb:43:30:d3:27:6f:6b:cd:63:
         04:83:a6:df:41:ad:d8:f4:c0:f9:88:de:3e:31:97:12:07:c9:
         7b:08:cb:48:a2:b3:42:7e:a2:6d:8d:2a:c9:c3:dd:d8:98:34:
         a1:33:31:69:94:1f:29:a4:b4:55:f8:46:5b:cb:0f:e1:ff:43:
         e4:d8:c7:83:ca:d6:eb:ff:8e:d4:dc:f6:aa:b9:86:b2:9c:f6:
         b6:e8:c4:2d:a6:0c:b8:e2:db:95:93:b2:e2:4c:87:bd:0a:b8:
         c6:91:45:7e:cb:2e:55:67:64:bc:ca:8b:f6:46:23:6e:ba:7b:
         89:86:e6:82:df:65:49:f6:41:bc:14:71:ae:22:57:36:39:7e:
         5c:76:56:0e:d5:86:fb:91:08:7e:ab:b8:bd:55:f7:9d:b1:c9:
         67:89:35:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 09:41:06 2024 by rpki-client on console-ams.rpki-client.org